VULNERABILITY INTELLIGENCE

CVE-2006-5111

CVSS score5 MEDIUM
EPSS probability1.90%
CISA KEVNot currently listed
Published2006-10-03
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:N/I:N/A:P

Description

The libksba library 0.9.12 and possibly other versions, as used by gpgsm in the newpg package on SUSE LINUX, allows attackers to cause a denial of service (application crash) via a malformed X.509 certificate in a signature.

Primary references